Unlock instant, AI-driven research and patent intelligence for your innovation.

Method for recovering files deleted from FAT32 document system

A technology for deleting files and file systems, which is applied in the computer field and can solve problems such as failure to achieve recovery purposes

Active Publication Date: 2007-01-31
KINGSOFT
View PDF1 Cites 11 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

But there are also rare cases where the file type flag of the deleted file is unknown, so the above method cannot achieve the purpose of recovery

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for recovering files deleted from FAT32 document system
  • Method for recovering files deleted from FAT32 document system
  • Method for recovering files deleted from FAT32 document system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0022] The flow of the method of the present invention and the application principle of the method will be described below with reference to the accompanying drawings.

[0023] see figure 1 and figure 2 , which are the directory entry structure diagrams before and after file deletion. Comparing the two pictures, it is not difficult to find that there are two main changes after file deletion. One is that the first byte of the file name is marked as "deleted", The second is that the upper 16 bits of the file data start cluster are changed to 0. The file data start cluster information is the most valuable information for locating the file data location in the disk. As long as the file data start cluster information can be recovered, the location can be The position of the file data in the disk can also restore the deleted file, so a main task of the inventive method is to determine the high 16 bits of the file start cluster in the deleted file directory entry; the inventive met...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a method to restore the deleted file in hard disk. It includes the following steps: a. orienting deleted files catalog needed restore; b. judging whether undeleted file or folder existing of the same grade next to the file, if existing, coming into step c, else coming into step e; c. searching a catalog of undeleted file or folder; d. using the high 16bits of the starting locating cluster in catalog of undeleted file or folder as the high 16bit of the cluster of deleted file that needs to restore; f. creating file information of the high and low 16bits of cluster after filled that includes starting cluster, file size, file creating time, etc; restoring the deleted file to another location in hard disc. The invention could rapidly determine the staring cluster 16bits information of the deleted file and determine the starting cluster information of the deleted file and restore the file eventually.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method for recovering deleted files in a disk. Background technique [0002] The FAT32 directory entry structure is as follows figure 1 shown. When Windows performs file operations, it locates file data according to this structure. When deleting a file on a FAT32 logical disk in the Windows system, first mark the first byte of the file name as a deleted flag, then modify the upper 16 bits of the file data start cluster to 0, and finally perform space release processing. The structure of the directory entry after file deletion in the FAT32 partition is as follows figure 2 shown. When a file in the FAT32 partition is deleted, the high 16-bit data describing its starting cluster is cleared to 0. Although the low 16 bits describing its data starting cluster are correct, in most cases, according to the residual directory entry after file deletion The data structure of the file, and th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F11/14G06F17/30
Inventor 涂彦晖
Owner KINGSOFT